$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft File: AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft (raw, json) Hash identifier: bYqWermC8WiIidCGyCQIOzhJ1w6GE4M9IXQ2clnIqRo= Subject key identifier: 50:A9:4A:E9:02:C9:C4:AF:D3:F2:37:FB:99:95:B3:D0:AF:EC:5B:8A Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66 Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866 Certificate serial: 2DA4E8F3A5EC2A4EF59CA2020ABA8A81E908D1BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft Manifest number: 43 Signing time: Sun 04 Oct 2026 07:41:07 +0000 Manifest this update: Sun 04 Oct 2026 07:36:07 +0000 Manifest next update: Mon 05 Oct 2026 09:47:07 +0000 Files and hashes: 1: 39322e3234302e3233352e302f32342d3234203d3e203239343035.roa (hash: EGBbBNCVgZA7RRgb1ikg8DLO4hYxR8hBfm0EuF5QV+s=) 2: 3231372e37332e31362e302f32302d3234203d3e203239343035.roa (hash: iWR6okAvKqyu5oJU5+aD9MzJfwy1JD9sl+Akz3xHcFU=) 3: 39322e3234302e3233342e302f32342d3234203d3e203239343035.roa (hash: ZbrO3s1/sE3VB3YBwEq8N4l7+Zh6Aj9FReUoQ3Dbpi0=) 4: AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl (hash: ZChYRh6Mx5zAaC890x+XMdqgtDdw/4zew+l/v7GOoWw=) 5: 3231372e37332e31362e302f32342d3234203d3e203239343035.roa (hash: LL3P7lvswxfOA25czv9v+WkF3C0D0KnWO5P9MOkColw=) 6: 38362e3131302e3234312e302f32342d3234203d3e203239343035.roa (hash: psnZte3+Q299US8D2WamKfH/o+Xxqk26yh9SNQ4KUJw=) 7: 39322e3234302e3233302e302f32342d3234203d3e203239343035.roa (hash: fDWL1gciinjC0IXRqT2Q3PtDEb5nlNuoXJzFK/hcNV4=) 8: 326130313a3339303a3a2f33322d3634203d3e203239343035.roa (hash: EkahyzLSm2/v6AdCA2RLCahqupgwq6ocXbGbYPrCVpQ=) 9: 39322e3234302e3234352e302f32342d3234203d3e203239343035.roa (hash: zjSSSsKGGZnm7k5LvFSb2guDmXTBkSv+ePAfP6MlUDg=) 10: 39322e3234302e3235342e302f32342d3234203d3e203239343035.roa (hash: 7VdxSCKZcsd3qAeViATvYYCpFD+a1fGjlJWlaJPO0iQ=) 11: 39332e3138342e36342e302f32302d3234203d3e203239343035.roa (hash: qJyJZHLgF+VN+ii9OlFgksvK1ICSHqOEqlSg1DkmbiU=) 12: 39332e3138342e37372e302f32342d3234203d3e203239343035.roa (hash: KNROAqPfXENphQBzyfVk59v5Hvqlnlhj1Iqa4/Wrvfw=) 13: 39322e3234302e3234392e302f32342d3234203d3e203239343035.roa (hash: OWddMU2lVARc4e0qTNNk2twrubMUNkpdn9k9PUQykHc=) 14: 326130303a313064383a31303a3a2f34382d3634203d3e203239343035.roa (hash: OaS/OQQXkjX3sJOmUl5zc9tQy3jz0o+bUQUBhd2ZQH0=) 15: 39322e3234302e3233312e302f32342d3234203d3e203239343035.roa (hash: 8jlFwwnDnJiuu6OA5YfbHOJwmtTLw6Nop9J7C0sLtPc=) 16: 39322e3234302e3232392e302f32342d3234203d3e203239343035.roa (hash: DiT3qyppfKnihj39C/OG8uNu1BGSOnEXplU91nLYAfM=) 17: 3138352e3137362e37322e302f32322d3234203d3e203239343035.roa (hash: o4JrISAeOko/D99D7KNeLjlvTZIPY3wcIRzxxDIeJsA=) 18: 38362e3131302e3232342e302f31392d3234203d3e203239343035.roa (hash: b0zChgdz1vIMVhWdR5HGNfcD59h2BRuUdpFR8SjQgf4=) 19: 39322e3234302e3234342e302f32342d3234203d3e203239343035.roa (hash: IqjGqo5bykodH/rQX0Yyj0vB/XG7K+vBGQ1VS0dufJA=) 20: 34362e3232392e3232342e302f32302d3234203d3e203239343035.roa (hash: 4IIdVeDc8Q4j/hlnrmDiN32JvOe5YxgT+shULM0apQE=) 21: 39322e3234302e3232382e302f32342d3234203d3e203239343035.roa (hash: LxIsT0Z72nxO3Y284vPXgs9ScSm6Vj2A4oz7LMKnhVo=) 22: 39322e3234302e3232382e302f32342d3234203d3e203432303035.roa (hash: Nr549lUMnLpN1HEp8LJdbOoN53ZSlUaUINP6G5zL7j8=) 23: 39322e3234302e3235332e302f32342d3234203d3e203239343035.roa (hash: 3TcyJn0Vba3SdYkAgBupE2RJSi7wt6IrY6almrGdDwA=) 24: 39322e3234302e3234312e302f32342d3234203d3e203239343035.roa (hash: Opg5YCuZVpoZQMqVkdc7dq3/iqNbHLYh5wpFHjBXqwM=) 25: 39322e3234302e3233362e302f32342d3234203d3e203239343035.roa (hash: 5oyqw+KhylpUHglogsy7/I4LpBle8Q3qWBoa/BrHLEw=) 26: 326130303a313064383a3a2f33322d3634203d3e203239343035.roa (hash: SjPp4clvAHy+KAtZ7R25YFosiP+RM2Ku5fULo9nmZMA=) 27: 39322e3234302e3234322e302f32342d3234203d3e203239343035.roa (hash: kM+gDjZiEvVCID7wvcbCRUgVsT4ajdEwlZgKFdVmvR8=) 28: 38362e3131302e3234382e302f32342d3234203d3e203239343035.roa (hash: jkNhjwzhqphtd387aGK5KWwfcNq8xmY5Fe084eh7yWY=) 29: 3231372e37332e31372e302f32342d3234203d3e203239343035.roa (hash: DDST7kks9q2ds1FaT+50IBJBBJX55AtusDnbq0N98fU=) 30: 38312e38392e34382e302f32302d3234203d3e203239343035.roa (hash: oOFdsTbMdYmh54V2UagrZUE6rX1OAnUs3P4bv6a/jzs=) 31: 3130392e37342e3134342e302f32302d3234203d3e203239343035.roa (hash: xohX/Ehc0bh3gDMEqDdvV2NRcW4FHqeBZZSuJrMdXQI=) 32: 39322e3234302e3233372e302f32342d3234203d3e203239343035.roa (hash: 8TUKR6ccLxStHiY46OibIeVHKIYrsgaU4259nUYDI0Q=) 33: 38362e3131302e3234332e302f32342d3234203d3e203239343035.roa (hash: +f51ZZBf9NkOVMQhrwv8QxlQbFeYhMSfw/1KOCVjv/M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 09:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a4:e8:f3:a5:ec:2a:4e:f5:9c:a2:02:0a:ba:8a:81:e9:08:d1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866 Validity Not Before: Oct 4 07:36:07 2026 GMT Not After : Oct 5 09:47:07 2026 GMT Subject: CN=50A94AE902C9C4AFD3F237FB9995B3D0AFEC5B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:43:43:f9:b7:dd:a5:8e:cd:e3:ba:ad:05: 34:d5:7c:e5:2c:fa:55:80:93:ac:14:b5:5e:98:0e: 47:a1:44:89:dc:36:09:49:b7:52:e2:ed:f2:09:90: 23:f2:5e:1a:e3:16:3d:a2:46:b1:d1:70:4c:77:9c: 8c:e2:7f:98:8f:5b:dc:17:1d:56:d7:ee:03:94:bc: 03:a8:93:73:02:7a:f1:12:32:4d:5f:6a:c9:e7:7d: ed:3f:05:fb:1e:be:1b:e5:69:6f:5a:74:d3:0e:a5: 41:ac:15:73:64:77:18:39:08:4d:d7:cb:8f:8e:db: e9:72:18:f6:a8:79:f3:7f:66:44:a8:a5:e5:ea:f9: db:01:a1:1f:73:59:ab:f1:6b:f3:1d:a0:6b:be:70: 4b:d6:eb:44:0c:46:66:a7:23:4c:a4:c3:69:68:8d: c7:4b:e9:9d:d0:15:4c:d3:14:01:b9:96:41:46:c3: 0c:75:20:da:54:77:ea:e8:10:33:27:6d:e3:e4:00: 14:f6:ff:da:74:95:29:5e:68:fb:c7:57:0d:a9:e6: 5e:85:f2:e5:eb:c7:2a:5d:38:ec:57:f7:e2:55:1b: 10:3c:e9:2c:d4:d2:6f:fb:b3:b3:39:88:bc:d2:40: 63:be:95:16:c7:36:7f:1d:ee:fc:15:9f:12:19:09: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A9:4A:E9:02:C9:C4:AF:D3:F2:37:FB:99:95:B3:D0:AF:EC:5B:8A X509v3 Authority Key Identifier: keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1a:e4:09:b2:f0:e2:03:3e:7b:52:71:7b:e7:31:a4:81:39: f3:21:a7:6f:3e:d8:f4:a7:8d:35:e8:66:6f:b0:29:af:21:fd: 7d:b7:cc:93:02:be:96:09:9d:1b:b9:1a:67:6e:4c:ec:76:58: 93:5e:7f:c3:ad:84:17:ac:e0:f3:6f:0d:97:5e:ac:67:73:7f: ff:8a:3f:22:33:4e:46:18:33:1c:37:36:19:b3:99:28:9d:ee: b7:e2:5b:cd:40:27:d2:eb:3b:6b:07:25:58:e7:ab:97:80:39: e6:19:ee:5e:ae:9c:71:fe:dc:90:4d:eb:a2:67:0e:bf:84:15: 1d:18:79:d8:9f:ab:d7:4b:04:f9:52:04:5d:ab:ba:f6:21:81: ed:9d:fe:43:61:c4:26:eb:85:56:f2:15:10:a8:0b:64:8d:02: cd:fe:cb:48:2b:4a:bc:26:ce:27:24:81:45:c4:bc:c6:fa:62: 2b:b1:32:f7:2f:a0:c2:51:af:df:4d:e0:47:45:a0:7f:0f:eb: bf:6f:db:b9:be:8b:d1:b0:de:ce:2d:20:43:86:74:42:f1:9f: 1f:0f:5a:17:74:73:0f:04:82:1a:b1:c2:89:25:f3:d2:52:96: 05:f7:4d:ec:8e:81:07:31:ce:eb:bd:85:a2:83:f1:a5:a6:84: ef:22:b2:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULaTo86XsKk71nKICCrqKgekI0bowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj YjA1Yjg2NjAeFw0yNjEwMDQwNzM2MDdaFw0yNjEwMDUwOTQ3MDdaMDMxMTAvBgNV BAMTKDUwQTk0QUU5MDJDOUM0QUZEM0YyMzdGQjk5OTVCM0QwQUZFQzVCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/0ND+bfdpY7N47qtBTTVfOUs +lWAk6wUtV6YDkehRIncNglJt1Li7fIJkCPyXhrjFj2iRrHRcEx3nIzif5iPW9wX HVbX7gOUvAOok3MCevESMk1fasnnfe0/BfsevhvlaW9adNMOpUGsFXNkdxg5CE3X y4+O2+lyGPaoefN/ZkSopeXq+dsBoR9zWavxa/MdoGu+cEvW60QMRmanI0ykw2lo jcdL6Z3QFUzTFAG5lkFGwwx1INpUd+roEDMnbePkABT2/9p0lSleaPvHVw2p5l6F 8uXrxypdOOxX9+JVGxA86SzU0m/7s7M5iLzSQGO+lRbHNn8d7vwVnxIZCemnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUKlK6QLJxK/T8jf7mZWz0K/sW4owHwYDVR0j BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2 M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz RnVHWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNWEwZWZmMi1i NDVjLTQyOWYtOTAwMS0yMzQxZDQ2YjYzZTAvMC9BQzBDRTNFNkE5REJDRkEyNTFF NTZFNTAwMkVDNEJCQkNCMDVCODY2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhrkCbLw4gM+e1Jxe+cx pIE58yGnbz7Y9KeNNehmb7ApryH9fbfMkwK+lgmdG7kaZ25M7HZYk15/w62EF6zg 828Nl16sZ3N//4o/IjNORhgzHDc2GbOZKJ3ut+JbzUAn0us7awclWOerl4A55hnu Xq6ccf7ckE3romcOv4QVHRh52J+r10sE+VIEXau69iGB7Z3+Q2HEJuuFVvIVEKgL ZI0Czf7LSCtKvCbOJySBRcS8xvpiK7Ey9y+gwlGv303gR0Wgfw/rv2/bub6L0bDe zi0gQ4Z0QvGfHw9aF3RzDwSCGrHCiSXz0lKWBfdN7I6BBzHO672FooPxpaaE7yKy WQ== -----END CERTIFICATE-----Generated at Sun Oct 4 19:48:54 2026 by rpki-client